Writing

1,100+ agent skills shipped into Claude Code, Cursor and Codex CLI with no pre-execution authorization, after 90 days of malicious skill campaigns.

Cloning a repo and pressing Enter on Claude Code's trust dialog spawns an unsandboxed MCP server with full OS privileges. Anthropic called it design intent.

A Fortune 50 AI agent removed a security restriction and passed every identity check. Seven vendors shipped runtime detection at RSAC 2026, and none of them check the call before it runs.

CVE-2026-26030 turned a search prompt into calc.exe on the host. Blocklists cannot contain a dynamic language, and filters cannot contain an agent.

A Morse code post on X moved through Grok into Bankrbot and shifted 3 billion DRB tokens. The failure was authorization, not the smart contract.

Cursor, Codex, and Claude Code were all exploited between February and April 2026. Every case stole or abused a credential. None broke the model. Monitoring is not authorization.

MCP secures the connection and CIS secures the configuration, but nobody checks what the agent is authorized to do. Four questions find the gap.

Nine thousand eight hundred downloads, no malware, no exploit. Just skill files telling agents to register with a server and upload their own wallet keys.

The agent passport spec now defines a .well-known/oap/ discovery endpoint so any system can verify what an AI agent is authorized to do.

Guardrails decay through model drift, context bleed and stale policy. Why four RSA 2026 vendors enforce too late, and the signed audit trail that catches drift on any stack.

NIST wants agent identity, an authorization check before each action, and auditable receipts. All three are implementable now, without waiting for the standard to finalize.

One error message at 11:23 PM showed me that independent agent passports do not scale. The template and instance pattern from Chimoney's codebase fixed it.

TL;DR A registry is a "known-good agents" list that your partners can trust at a glance. Don't let anybody list anything; require a lightweight owner verification and simple permissions/limits.

The future of AI is not just about intelligence. It's about integrity. Implementing a digital ID and passport system is a critical step toward building a secure, trustworthy, and responsible…

Pause for a second and think. When you hear the phrase Content Creator, what comes to your mind? You’re thinking Instagram Influencer, Vlogger, Travel Photographer, and Blogger.

To illustrate how to build with Interledger, I will tell you a story. It’s December 2021, and many Nigerians from the South are back in Nigeria to spend Christmas with family and friends from all…

Using VPN when a website, App, or IP is blocked Mobile network or other parties block access to specific websites, apps, or domains.

Journey into Web Monetization Web Monetization is a new Web Services (API) that allows users to stream a small number of micropayments to the website they are looking at via their browser or other…

The impact of an excellent digital identity on the life and wellbeing of all humans, especially refugees, cannot be overemphasized.

Many people have asked me how I got started with Blockchain, so I will be breaking it down in the post to share some insights for those looking to break into the space.

In June, DEV announced that DEV is web monetized. That got me thinking about Web Monetization and how to enable Web Monetization in as many websites and apps as possible so that Creators can get paid…

This was adapted from one of my lectures at the Tekedia Mini-MBA program where I taught New Technologies, Growth, Disruption Innovation.

When I started NaijaHacks, I did not know what I was getting myself into. The original idea was to have a small 50–100 person self-funded hackathon. And we went big!

Your startup is growing, and you’re making lots of money. You notice users visiting from countries that are not English-speaking, and you celebrate.